IPsec (Internet Protocol Security) is a protocol for securing IP communications by authenticating and encrypting each IP packet of a communication session.

learn more… | top users | synonyms

1
vote
0answers
18 views

Issues with enpoint mapper service

In short, we have a VPN server and an AD server. The VPN server is our connection to a remote AD server. From the VPN server, I can use port query to verify that port 135 is not filtered and it ...
1
vote
0answers
576 views

Partial VPN connections on Cisco ASA

Cisco ASA 5505 in remote site, connecting as Easy VPN client to ASA 5510 at HQ. VPN light is green, and sh crypto isakmp sa shows active security association. However connectivity to some of our ...
1
vote
0answers
70 views

Is there a way to have VPNC failover automatically to a second Cisco firewall?

I'm currently using VPNC on my Ubuntu machine to VPN to a remote Cisco firelwall. It's critical for this VPN connection to be up at all time. Is there a way to have VPNC failover automatically to a ...
1
vote
0answers
339 views

Cisco with site-to-site and EzVPN - configuration Issue

This is the first time for me to work with Cisco Router. The below mentioned is my configuration where Cisco Srv is Cisco 7200 Series Router XYZ is one VPN Server running on Linux. RAC is ...
1
vote
0answers
325 views

L2TP/IPSec Tunnel to Virtual Network Interface

How do I set up a virtual network interface in Ubuntu so that OpenSWAN will happily forward packets between a remote mobile subnet and sockets on the local virtual device? This is my infrastructure: ...
1
vote
0answers
277 views

Cisco RV220W ipsec with wrong ip packets

I just setted up a IPSEC lan to lan ipsec connection and since our local ip ranges colide with the remote network, I setted the local ip in the VPN police to be our external wan ip. The vpn tunnel is ...
1
vote
0answers
319 views

SMB over IPSec prompting for credentials

I am trying to connect our web server to customers SQL/file server through a VPN tunnel. Originally we had setup a PPTP VPN and I was able to access their file shares without issue. Since PPTP ...
1
vote
0answers
3k views

Cisco ASA - Duplicate ISAKMP SA - REKEYs

I have an issue with IPSEC VPNs where a single endpoint generates multiple ISAKMP SAs. (in my examples I have replaced the IPs - 1.1.1.1 is the remote endpoint, 10.10.10.10 is an object on the remote ...
1
vote
0answers
1k views

IPSec VPN login failing with certificate authentication

I am working on an IPSec VPN solution allowing iPhones / iPads to connect to a Linux server running Gentoo. I have been able to get the VPN functioning as expected using PSK authentication (PSK + ...
1
vote
0answers
377 views

ipsec tunnel connectivity issue

I trying to connect Solaris 10 box to Cisco PIX with IPsec tunnel. And it seem halt at some point. And from the post @ http://www.mail-archive.com/networking-discuss@opensolaris.org/msg07573.html ...
1
vote
0answers
2k views

Openswan Ubuntu Malformed Packet

I'm trying to create an IPSec encrypted VPN tunnel to a Cisco ASA 5540 from a ubuntu server using openswan. I've set up VPN connections before to Cisco routers, so this task didn't seem like it would ...
1
vote
0answers
514 views

How to allow RDP through IPSEC using netsh advfirewall command

I have an offsite windows server 2008 R2 server. And an ipsec tunnel set on our router here plus a connection security rule in Advanced Firewall on the server. I have ssh access to the console on the ...
1
vote
0answers
251 views

Trouble connecting my server to a firefwall trough VPN

I have a server running Ubuntu and Openswan, but I'm not able to connect to the remote firewall. I hope that anybody can help me. My ipsec.conf-file is as follows: config setup protostack=netkey ...
1
vote
0answers
489 views

IPsec tunnels between Linux and Solaris

I have a Solaris machine sitting out in the ether somewhere that I would like to make part of my network via IPsec. I have this working between Solaris machines but not between Solaris and Linux. I ...
1
vote
0answers
143 views

Windows IPSec Filter Sanity Check

I'm installing NSClient++ so our Nagios system can monitor some windows servers using NRPE. I need to punch a hole in our IPSec policy to allow inbound connections on port 5666 from the Nagios server. ...
1
vote
0answers
893 views

StrongSwan - Windows 7 0 IPSec IKEv2 connection problems

I am trying to configure a roadwarrior scenario between a linux box with StrongSwan and a Windows Box with Agile VPN. I successfully configured my StrongSwan and my Windows box to connect. The Windows ...
0
votes
0answers
37 views

Use Openswan / IPSec on Ubuntu server to connect to existing Openswan VPN - NAT broken

I have an existing Openswan VPN, all working fairly well with Windows, Mac and Phones. [Office 192.168.0.0/24]---[VPN A.B.C.D]----[Internet]---[Home Routers (NAT), Dynamic IPs]----[Workstations] Now ...
0
votes
0answers
8 views

SQL 2012 IPSec or SSL

I have a requirement to secure connections to SQL server. (at transit that is) - TDE will be used for encryption at rest. SQL provides two options which are either certificate based SSL or Windows ...
0
votes
0answers
15 views

openswan - computing tunnel count?

When I do an /etc/init.d/ipsec status I see: pluto pid 10435 12 tunnels up some eroutes exist Question is how can I compute ahead of time how many tunnels will exist? I have one site-to-site that ...
0
votes
0answers
14 views

Racoon: inherit configurations

Starting to get acquainted with ipsec-tools and racoon, I'm wondering how stage 1 configuration inheritance works. With a sample configuration like this: remote "ParentConfig" { proposal { # ...
0
votes
0answers
66 views

Right way to set the MTU of an IPsec Client ( Linux/Racoon)

Here's the network topology : (PC1:IPsec Client)eth0---Internet CPE---((Internet))---Internet CPE---(PC2:IPsec Server) I've set up an IPsec Internet Gateway : PC1 sends all traffic, encrypted in an ...
0
votes
0answers
11 views

openswan ipsec tunel configuration

Its posible create ipsec tunel from SERVER1 to internal FTP. (i.e only for application on SERVER1) ? Network scheme: (private APP) (SERVER1 PUBLIC:1.1.1.1) ----------------------- ------- ...
0
votes
0answers
106 views

Cannot estabilish connection via VPN/L2TP to server

Hello system administrators! I would like to ask you a question, because I was looking at various internet tutorials for this, and nothing worked, so... I can't connect to server via VPN, it looks ...
0
votes
0answers
86 views

Windows RRAS server behind NAT to remote Fortigate via IPSec

I am about to deploy a Windows sever 2012 R2 RRAS server to connect to a FortiGate device via IPSec for site-2-site VPN. Phase 1 ending successfully, however, the Phase 2 failing, the Windows server ...
0
votes
0answers
164 views

Sonicwall GVC client failing on IKE phase 1 over LTE cell data connection

We're using Sonicwall's Global VPN Client to connect to our TZ210. It works fine over general WiFi, but not with the data connection on our on-call phone. When tethered via WiFi to the phone's ...
0
votes
0answers
69 views

(RouterOS) IPSec server can't find static policy on client connection

When trying to connect to server that have following settings: /ip ipsec peer> print 0 address=0.0.0.0/0 local-address=0.0.0.0 passive=yes port=500 auth-method=rsa-signature ...
0
votes
0answers
89 views

PfSense IPSec VPN client

I am new in PfSense I have configured site to site VPN and it works fine, "Site A" ( PfSense) and "Site B" ( SonicWall) both can access each other LAN network. Now i have also configured IPSec Mobile ...
0
votes
0answers
504 views

Mikrotik IPSec Tunnels not working after RouterOS upgrade

We upgraded our RB1100AH2x yesterday from 6.19 to 6.22 and lost our L2TP / IPSec tunnels in the process. The logs are now littered with IPSec errors stating failed to pre-process ph2 packet. In ...
0
votes
0answers
130 views

Connect Multiple Users Behind same NAT l2tp/IPsec

I have installed OpenSwan on CentOS 6, the clients connection to the server is successful and when i direct my browser to http://whatismyipaddress.com on the client it shows the public ip of the ...
0
votes
0answers
55 views

Openswan and Cisco ASA

i have post this same question on "Unix & Linux" but iv got no answer and will delete from there but ill try here too. I need this as soon as possible to solve it or at least to find out what is ...
0
votes
0answers
229 views

How to debug IPsec L2TP authentication failure (Ubuntu StrongSwan client to Windows Server 2012)

I'm trying to connect via IPsec L2TP to a Windows Server 2012 server. Both the clients and the host are behind a NAT. I can connect from a Windows 7 machine without any problems, but when trying to ...
0
votes
0answers
34 views

Route AAA LDAP traffic from ASA through IPSEC-tunnel to Windows DCs

We have one Cisco ASA 5505 in our HQ responsible for connect our remote office with a IPSEC-tunnel and one ASA 5505 at the remote office. The Cisco ASA 5505 in our HQ is also responsible for VPN users ...
0
votes
0answers
27 views

Reach non existing AWS VPC subnet from IPSec tunnel

So here is my setup: VPC: 172.16.0.0/16 Subnet 1: 172.16.1.0/24 openvpn server: eth0: 172.16.1.10 tun0: 172.17.0.1 ovpn client 1: 172.17.0.6 ovpn client 2: 172.17.0.10 IPSec VPN is using ...
0
votes
0answers
59 views

ClearOS OpenSwan to Linksys RV042 VPN not encapsulating packets

I have a big problem which prevents our IP Phones to be working properly for a week now; Our old DFL-210 fried during an electrical event. It was doing an IPSec VPN with our remote site via their ...
0
votes
0answers
60 views

How to configure strongswan to support iOS mobile devices?

I'm trying to configure strongswan server to support iPhones and iPads. I'm using client certificate for authentication, I have the following configuration for iOS in strongswan.conf : conn iOS ...
0
votes
0answers
40 views

Domain controller not allowing me to connect to it over IPSec tunnel

I'm trying to connect a Windows 7 computer to a domain controller over an IPSec tunnel. The tunnel has formed and the network is accessible. I have set the IPSec connection to use the windows domain ...
0
votes
0answers
30 views

Tagged traffic over Checkpoint IPSec

How can I forward tagged traffic over Checkpoint IPSec? Where I can read more info about it? I have Checkpoint R76 and I need to use tagged vlan over IPSec tunnel.
0
votes
0answers
14 views

Issue with SNAT and IPsec

Hi I am having issues with an IPsec connection I have, the connection is established this is the output of ipsec whack --status 000 #17: "connection/0x1":500 STATE_QUICK_I2 (sent QI2, IPsec SA ...
0
votes
0answers
35 views

Ipsec right side multiple ip's and phases lifetimes

This is my setup for ipsec: conn outside_company authby=secret ike=aes256-sha1;dh2 phase2=esp phase2alg=aes256-sha1;dh2 pfs=yes keyingtries=3 ikelifetime=24h ...
0
votes
0answers
360 views

vpnc: no response from target

I have not be able to for a tunnel using vpnc or shrew soft to my pfsense box running IPSec. I have made sure that the correct ports are open, the user I'm trying to log in has the correct permissions ...
0
votes
0answers
59 views

Openswan not updating the routing table

I have problems to find solution about this. I have Openswan and ASA configure IPSec VPN tunnel and the connections is established and working but with some little problems. The topology is looking ...
0
votes
0answers
149 views

IPSEC VPN with same remote peer IP - Only 1 remote connection at a time

I am using a Mikrotik router to connect multiple road warriors (Avaya phones) with IPSEC VPN behind the same WAN address. The first phone connects fine, when the second phone connects the first phone ...
0
votes
0answers
211 views

OpenSwan IPsec connection drops after 30 seconds

I'm trying to connect from my Linux Mint 16 box to a CloudStack server through IPsec L2TP. Building up the connection works (pings work across the tunnel). However 30 seconds later the IPsec tunnel ...
0
votes
0answers
159 views

IpSec/Racoon: Packets go to wrong tunnel

I use Debian and Racoon to connect to a Cisco VPN Gateway. We have got two tunnels between the same endpoints. Somehow and sometimes, packets go to the wrong tunnel. This is the log message from the ...
0
votes
0answers
169 views

Linux IPSec, association established but no traffic

We are attempting to setup an IPSec tunnel from a Debian firewall/router to a Netasq hardware firewall. On the Debian side the tools used are IPSec-tools and Racoon. The IPSec SA is established ...
0
votes
0answers
102 views

openswan slow initial iperf tests

I have some working tunnel servers and although they appear to work, I'm concerned about the results of some performance tests I've been performing. The results look much like this: ...
0
votes
0answers
399 views

Multiple Windows clients behind a same NAT gateway cannot connect to L2TP/IPsec VPN server at the same time

I have set up a L2TP/IPsec VPN server on a cloud VM (with a public IP address) running CentOS 6.5 (kernel: 2.6.32) with openswan/xl2tpd (openswan: 2.6.37, xl2tpd: 1.3.6). However, if multiple Windows ...
0
votes
0answers
253 views

Cisco ASA 5505: PAT / NAT between 2 IPSec Tunnels

I've the following Setup: Customer <-> HQ <-> Branchoffice The Customer has a 192.168.1.0/24 subnet. On the HQ only the VPN Gateway is in my context, 172.20.10.1 . And on the Branchoffice ...
0
votes
0answers
105 views

vServer: Configuring single (/128) assigned IPv6 addresses for use as IP address pool for IPSEC (Strongswan) road warriors

I've a new (dev) vServer up and running. Unfortunately the provider only hands out single IPv6 addresses (not even /64 subnets). Now I am a bit confused how to achieve the following: I want to use ...
0
votes
0answers
188 views

Windows 2008 R2 site-to-site IPSEC tunnel with Juniper: tunnel up but packets are lost

I am stuck on this task almost for 2 days. Organized a site-to-site IPSEC tunnel between Juniper and Windows2008R2 machine (let's call it W2008R2 for reference). W2008R2 is a multihomed machine (2 ...